Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
File:                     SBVxyrg7M5yGCR7HR8ITX85PZYc.mft (raw, json)
Hash identifier:          AM6WRR4fs1atOvjet2FGiHBs/EHYZK5Raqkf/Pu9PLY=
Subject key identifier:   00:A3:D1:A2:72:31:AC:33:6B:82:81:C6:CC:87:84:12:B6:19:48:87
Authority key identifier: 48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87
Certificate issuer:       /CN=481571cab83b339c86091ec747c2135fce4f6587
Certificate serial:       0193572D6F3A846CE9C8B0347128E002BC5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
Manifest number:          1215
Signing time:             Sat 23 Nov 2024 04:00:15 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:15 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:15 +0000
Files and hashes:         1: SBVxyrg7M5yGCR7HR8ITX85PZYc.crl (hash: m2cdBC0i28rBppCrxoxckhb9TVo2GoG4WnPkjAkQa5g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:6f:3a:84:6c:e9:c8:b0:34:71:28:e0:02:bc:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481571cab83b339c86091ec747c2135fce4f6587
        Validity
            Not Before: Nov 23 04:00:15 2024 GMT
            Not After : Nov 24 04:00:15 2024 GMT
        Subject: CN=00a3d1a27231ac336b8281c6cc878412b6194887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:40:f4:2f:a3:3e:de:38:f5:98:10:ec:15:eb:
                    ad:46:de:e2:de:e1:65:6b:e3:c9:0b:a3:90:20:c9:
                    26:36:46:84:72:7f:ea:47:0d:c5:73:6f:7e:cd:42:
                    ff:27:c3:3c:c3:15:bc:79:26:08:58:7d:c4:5d:43:
                    3f:45:e1:57:55:43:bf:1c:d7:bf:87:32:cd:1a:87:
                    f2:30:70:ce:f0:ff:58:8d:b2:25:7c:d0:8a:ee:47:
                    13:d4:a6:ff:03:66:f9:2f:f0:d1:59:a7:f2:28:c3:
                    49:08:3e:a5:67:5c:21:de:8a:ac:ad:91:4a:62:4e:
                    06:e7:b3:28:bd:4c:13:42:74:6d:10:0d:1a:98:01:
                    47:a5:f2:cb:36:14:ad:e5:1e:62:c1:94:40:04:91:
                    63:b9:9e:59:c7:ec:1a:0c:69:3d:c0:75:ac:94:ea:
                    77:26:99:b2:a2:6a:b8:bb:f0:93:1e:b4:9e:8d:74:
                    8d:23:76:7d:cf:bb:7d:c2:7b:d4:d1:39:3d:97:64:
                    9d:94:d7:ad:41:56:fc:7e:ee:6f:01:96:95:2f:39:
                    72:2d:6a:4b:29:d2:0f:df:ec:c5:1a:34:fa:11:d9:
                    f1:e6:5c:b8:9d:d1:08:d9:49:b0:45:47:4f:6a:77:
                    0f:59:f6:7f:96:95:5b:85:ff:2b:78:11:5c:91:6a:
                    ed:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A3:D1:A2:72:31:AC:33:6B:82:81:C6:CC:87:84:12:B6:19:48:87
            X509v3 Authority Key Identifier:
                keyid:48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c3:a6:42:c6:36:8e:b5:42:ec:0d:55:4e:a4:27:74:c2:70:
         9e:a8:95:32:5c:f4:bd:e7:d5:44:1c:92:d0:d8:3b:fb:2d:eb:
         c6:44:b0:f1:2e:17:65:d1:33:52:6a:27:74:4a:82:b1:d5:4c:
         95:2b:7e:c5:24:e4:64:6f:9b:3d:9e:0b:fa:2b:3c:ce:2a:86:
         4a:5a:d6:2a:9a:60:e7:8c:7b:65:b5:08:b6:64:63:53:a0:94:
         a0:f2:b7:4b:a1:b3:96:90:ae:ac:da:52:68:fc:b8:de:ce:2b:
         b8:c5:02:74:26:a1:62:1b:fe:92:56:cd:63:e3:0e:37:51:ae:
         14:f8:6c:bc:38:ca:69:5a:ec:d6:80:01:1f:80:dd:57:0d:f1:
         ed:ad:25:1e:fb:f8:27:49:77:9b:0b:e0:44:21:5a:fa:5c:28:
         b3:c7:a6:59:2e:b2:b2:89:69:9d:d4:ed:1b:08:28:13:38:5f:
         2a:ee:eb:32:c2:6d:de:a4:f4:c1:12:5f:11:ac:f0:d2:de:92:
         bc:0e:1c:40:52:2e:42:cd:d1:b0:46:b2:16:aa:e1:41:0f:b6:
         76:29:54:d2:23:7c:26:b2:dc:f8:13:05:b2:1f:ea:ed:fd:c9:
         71:92:9e:08:25:97:8c:77:24:e5:26:c6:0e:eb:2d:45:c6:8e:
         ef:39:bb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----